sync - #3

Merged

Kananosa merged 12 commits into

Kananosa:mainfrom

farion1231:main

Jul 29, 2026

Commits on Jul 29, 2026

chore(presets): migrate AIGoCode sponsor domain to .app
farion1231
committed
fix(database): reject cross-file statements during SQL import
farion1231
committed
fix(sessions): use POSIX single-quote escaping for terminal cwd
farion1231
committed
docs(sessions): record the renderer trust boundary for terminal launch
farion1231
committed
fix(config): stop common config snippet walkers touching Object.prototype
farion1231
committed
feat(deeplink): add risk classification helpers for import confirmation
farion1231
committed
fix(deeplink): surface MCP args/env and flag risky values on import
farion1231
committed
fix(deeplink): decode URL-safe Base64 in import confirmations
farion1231
committed
fix(deeplink): import usage scripts disabled and show their code
farion1231
committed
docs(user-manual): correct the deeplink usageEnabled default
farion1231
committed
docs(security): document the threat model and reporting scope
farion1231
committed
fix(test): pin zip extraction temp dir instead of hijacking TMPDIR
farion1231
committed